Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 03:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe
- Size 14.1MB
- Sample260905-d2wjdawcle
- SHA256 d98c466cfeef29a2a4100e4874ba99fa6885065ae6a0be35f5c0c48a559f1e39
- MD5 9104510221c2f1638c69bef694749209
- SHA1 da89c91dd465f1ca03cbb8e42b84bedf4257a6d8
- SHA512 c0df983d104a470b31e4477a05b51e57b016b7e2627c013439f43a4c1c9af73371fcd5d5abd7d70eb64ce0c8a240966271fbebbdd0cc572d2b45dd67678f7e55
- SSDEEP 393216:ABx4cFvi6SD/KlKxuWuGwyecY4r/RL49Lv:AIAg+KxXfw3clr5G
- TLSH T1C8E62207E2D1E6F9FA278A384961AB079377B016073107DF52E17274EE972E02E79742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{C6895D7F-4716-4248-A2DD-64DC9C72BC8A} 2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2764 2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2764 2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2764